Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/y-aF71txcZVu91d3rpZnpJkOmFo.roa
File: y-aF71txcZVu91d3rpZnpJkOmFo.roa (raw, json)
Hash identifier: WEjTkx0tWoNE1K9Gq9BL41J5UF+vsu06Crse2B94piU=
Subject key identifier: CB:E6:85:EF:5B:71:71:95:6E:F7:57:77:AE:96:67:A4:99:0E:98:5A
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 01968BA4B93856AA8E5375C751B7A9B4BC03
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/y-aF71txcZVu91d3rpZnpJkOmFo.roa
Signing time: Thu 01 May 2025 11:39:10 +0000
ROA not before: Thu 01 May 2025 11:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0a:c383::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:a4:b9:38:56:aa:8e:53:75:c7:51:b7:a9:b4:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: May 1 11:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe685ef5b7171956ef75777ae9667a4990e985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:b3:fa:2b:7d:ce:24:64:e3:d4:d7:74:d7:
7b:37:bf:2c:88:58:ad:83:4c:41:00:6c:ee:d3:fe:
01:4e:a3:2d:89:b6:12:b0:db:d3:4f:d7:e9:db:04:
ea:7b:2f:bd:36:22:05:e8:27:8a:8b:56:9d:cb:51:
92:aa:84:bb:1e:25:86:d5:ae:02:f5:e1:66:27:cd:
02:90:70:d7:04:25:fe:1f:c1:c2:05:5e:be:da:0f:
17:41:5c:43:9e:84:4d:a5:bb:5e:90:22:a3:47:9c:
29:c5:29:8d:58:19:b5:a5:6b:3e:84:99:94:ef:7c:
82:19:96:ac:f9:37:ab:a1:e7:d0:85:ea:04:9d:6b:
29:e2:65:e7:82:d0:15:ee:10:db:cb:04:b9:a9:65:
90:1c:a5:05:94:11:19:cd:6c:ee:7c:58:8e:75:1e:
4e:e7:34:70:63:8e:96:44:d4:d5:8b:f8:f1:00:f9:
fd:c4:48:da:92:76:dc:2d:bb:d5:c7:14:03:21:6c:
35:e3:42:a6:b2:b1:18:08:d0:48:1d:4e:ce:93:fe:
17:a5:6e:29:d2:b2:b2:11:b2:71:6c:ff:58:6e:a6:
61:58:e5:4a:a4:67:65:71:35:24:0b:a2:89:47:54:
d9:e3:23:b8:15:8a:7b:22:95:43:dc:88:a3:bd:92:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E6:85:EF:5B:71:71:95:6E:F7:57:77:AE:96:67:A4:99:0E:98:5A
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/y-aF71txcZVu91d3rpZnpJkOmFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c383::/32
Signature Algorithm: sha256WithRSAEncryption
37:0c:15:0a:a7:62:fd:fc:f5:14:66:f4:fd:be:fd:78:d7:f5:
34:3f:07:d7:1e:1f:04:7a:14:84:f5:2a:de:6f:4e:17:a6:05:
27:c2:93:4c:a5:d4:c3:98:e1:cf:6e:ee:83:59:ca:85:d6:d0:
a6:11:5b:ec:7a:48:b5:c2:a5:17:f6:02:76:c6:79:fd:64:5d:
de:2f:2d:95:a7:71:0a:13:9a:c9:77:dd:05:8b:8a:dc:82:d0:
16:a3:aa:5e:d2:4c:64:ce:c8:f7:13:cf:7e:cf:a9:29:40:fd:
ef:ee:43:5d:ae:2f:df:96:47:82:7b:e9:cf:ac:1b:a6:f5:77:
ea:bd:db:f9:20:ab:3b:0b:df:28:b7:cc:34:1d:e5:77:ec:5a:
ed:a2:47:2b:34:de:3e:f4:ce:02:15:a9:dd:58:d3:03:3b:13:
9e:6a:c2:e9:a1:4e:3c:12:57:48:d3:59:ed:86:28:16:fa:e4:
89:c0:82:52:c2:73:fb:59:fc:17:09:e7:ad:c9:eb:90:c2:fe:
7d:1a:44:7b:a9:30:17:e8:38:ae:2e:a5:5b:56:1e:f2:7b:fe:
76:86:c5:a2:6d:85:a6:1e:7f:3a:0c:eb:34:0a:1a:ff:ff:1c:
f5:76:a5:29:02:22:80:c1:99:cd:5b:01:83:57:d7:4d:a9:b1:
a3:32:e5:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZaLpLk4VqqOU3XHUbeptLwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWNjZDgzMGI3ZTAzMzA4YmY1Y2YyNWU2N2E3ZmMyYmRl
MDk1N2MwHhcNMjUwNTAxMTEzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmU2ODVlZjViNzE3MTk1NmVmNzU3NzdhZTk2NjdhNDk5MGU5ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva6z+it9ziRk49TXdNd7N78siFit
g0xBAGzu0/4BTqMtibYSsNvTT9fp2wTqey+9NiIF6CeKi1ady1GSqoS7HiWG1a4C
9eFmJ80CkHDXBCX+H8HCBV6+2g8XQVxDnoRNpbtekCKjR5wpxSmNWBm1pWs+hJmU
73yCGZas+TeroefQheoEnWsp4mXngtAV7hDbywS5qWWQHKUFlBEZzWzufFiOdR5O
5zRwY46WRNTVi/jxAPn9xEjaknbcLbvVxxQDIWw140KmsrEYCNBIHU7Ok/4XpW4p
0rKyEbJxbP9YbqZhWOVKpGdlcTUkC6KJR1TZ4yO4FYp7IpVD3IijvZKBYQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMvmhe9bcXGVbvdXd66WZ6SZDphaMB8GA1UdIwQY
MBaAFMqczYMLfgMwi/XPJeZ6f8K94JV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQt
ZDFjZGUyNDY1Zjg5LzEveS1hRjcxdHhjWlZ1OTFkM3JwWm5wSmtPbUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9hNjhmMjEtOWZmOC00YTQ0LWEzNmQtZDFjZGUyNDY1Zjg5
LzEveXB6Tmd3dC1BekNMOWM4bDVucF93cjNnbFh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgrDgzAN
BgkqhkiG9w0BAQsFAAOCAQEANwwVCqdi/fz1FGb0/b79eNf1ND8H1x4fBHoUhPUq
3m9OF6YFJ8KTTKXUw5jhz27ug1nKhdbQphFb7HpItcKlF/YCdsZ5/WRd3i8tladx
ChOayXfdBYuK3ILQFqOqXtJMZM7I9xPPfs+pKUD97+5DXa4v35ZHgnvpz6wbpvV3
6r3b+SCrOwvfKLfMNB3ld+xa7aJHKzTePvTOAhWp3VjTAzsTnmrC6aFOPBJXSNNZ
7YYoFvrkicCCUsJz+1n8FwnnrcnrkML+fRpEe6kwF+g4ri6lW1Ye8nv+dobFom2F
ph5/OgzrNAoa//8c9XalKQIigMGZzVsBg1fXTamxozLlKg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:43:04 2025 by rpki-client